$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json) Hash identifier: tvKqLALpEsHUp9Hgw2THLzOZnh8Sz58ZFQq8UrK/ix4= Subject key identifier: 51:AC:42:D5:CE:2C:16:BA:5A:74:F6:D3:86:92:16:C3:56:3D:47:E0 Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Certificate serial: 0D24CA08A7F7408D4C05F764009E0064D5FC5A04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:01:51 +0000 Manifest this update: Tue 12 May 2026 22:56:51 +0000 Manifest next update: Thu 14 May 2026 00:02:51 +0000 Files and hashes: 1: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: nUBsnxzoWAwoeQfJi0hJ1sRoys9EzHIp9GQO+dPJa8o=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=) 3: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=) 4: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=) 5: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=) 6: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:24:ca:08:a7:f7:40:8d:4c:05:f7:64:00:9e:00:64:d5:fc:5a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Validity Not Before: May 12 22:56:51 2026 GMT Not After : May 14 00:02:51 2026 GMT Subject: CN=51AC42D5CE2C16BA5A74F6D3869216C3563D47E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:bb:fd:b2:05:61:77:f1:96:81:41:d6:10: 01:7c:8d:e8:98:d9:2a:21:55:6b:12:81:3b:42:12: 83:d9:d0:18:bb:f8:a7:2c:93:85:65:ae:06:36:0e: 3c:fa:65:91:c0:c5:ce:ea:7c:23:4a:2e:7f:cb:23: 10:36:5c:a9:67:e8:67:6c:52:e3:2d:8b:24:ab:82: 2a:29:06:c3:ce:7b:f3:fb:eb:4c:86:61:e7:35:cc: 2c:51:73:e6:c1:1a:76:89:b4:8c:91:ba:3c:a6:5a: 35:5f:be:ed:cc:2e:ab:18:f6:b1:28:a9:03:aa:24: e9:f5:bb:11:a3:04:d4:81:47:7f:46:0a:67:f3:1d: 46:04:84:48:e7:13:27:fe:97:47:de:67:55:6f:76: d3:7a:b9:d7:9f:28:65:47:43:41:50:01:d4:a3:0d: 4d:f7:3f:67:ec:8a:21:ff:ab:7e:93:cc:f3:5f:73: a3:f5:e0:ba:d0:63:14:a2:55:3b:43:26:a5:e6:ab: 7e:36:66:05:5a:71:f9:04:af:dd:da:8c:3f:8c:4b: 6f:0b:98:7c:01:19:17:bf:cd:86:e2:d0:75:a6:e9: 22:c3:79:48:58:39:bf:c1:43:75:2c:08:06:1a:6e: dc:5b:45:c3:a0:02:c0:cc:ab:60:96:8b:27:b1:e7: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AC:42:D5:CE:2C:16:BA:5A:74:F6:D3:86:92:16:C3:56:3D:47:E0 X509v3 Authority Key Identifier: keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:d1:13:c7:a1:14:90:76:3d:36:11:fa:36:67:bb:4d:9b: 34:e5:4a:7f:4a:99:68:f6:88:cc:90:79:b1:50:40:55:73:dd: 9d:03:b0:93:98:48:da:81:f6:25:64:95:ca:a2:5b:b0:7e:4e: c5:ad:59:35:d5:2b:e4:df:24:20:52:62:d0:72:af:bd:d7:b2: 74:25:70:00:dc:86:1e:3d:f9:60:7d:48:47:ae:0f:8e:a1:05: d0:61:67:a5:4c:4d:08:d5:a1:5d:5b:c6:c3:6e:51:07:ab:c1: db:f1:d8:50:41:12:8f:13:e2:24:3f:2f:8f:51:a1:e3:01:b0: b6:9b:98:55:1f:0b:ff:61:75:f2:ee:51:1e:61:9f:a9:8c:27: f1:9b:97:f0:2f:71:2d:2e:29:e9:f1:01:fa:1a:43:0c:db:f4: c7:70:ff:32:c4:05:d1:4a:c4:35:8e:cb:51:e2:99:42:08:92: 37:00:4a:61:b8:7a:3b:41:bb:9a:dc:12:67:e9:b8:06:13:e5: 43:70:99:6e:02:2a:09:d8:6b:ec:7e:a6:f5:75:53:dd:19:9d: ce:c1:4b:89:5b:f0:70:14:67:d1:c9:51:29:76:fa:63:6d:25: e4:1c:d2:d4:b5:21:13:39:f7:b3:fa:c8:b9:7b:f4:32:d6:23: e7:2d:8b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSTKCKf3QI1MBfdkAJ4AZNX8WgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRB MDMzQzhDRTAeFw0yNjA1MTIyMjU2NTFaFw0yNjA1MTQwMDAyNTFaMDMxMTAvBgNV BAMTKDUxQUM0MkQ1Q0UyQzE2QkE1QTc0RjZEMzg2OTIxNkMzNTYzRDQ3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T7v9sgVhd/GWgUHWEAF8jeiY 2SohVWsSgTtCEoPZ0Bi7+Kcsk4VlrgY2Djz6ZZHAxc7qfCNKLn/LIxA2XKln6Gds UuMtiySrgiopBsPOe/P760yGYec1zCxRc+bBGnaJtIyRujymWjVfvu3MLqsY9rEo qQOqJOn1uxGjBNSBR39GCmfzHUYEhEjnEyf+l0feZ1VvdtN6udefKGVHQ0FQAdSj DU33P2fsiiH/q36TzPNfc6P14LrQYxSiVTtDJqXmq342ZgVacfkEr93ajD+MS28L mHwBGRe/zYbi0HWm6SLDeUhYOb/BQ3UsCAYabtxbRcOgAsDMq2CWiyex58KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUaxC1c4sFrpadPbThpIWw1Y9R+AwHwYDVR0j BBgwFoAUNpO9uNlTnVOXjUK3FBH3LaAzyM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IxMzBiNzUtNDU5My00MTQxLWEwNmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhE OTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRBMDMzQzhDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjkzQkRCOEQ5NTM5RDUzOTc4RDQyQjcxNDExRjcyREEwMzND OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3 MkRBMDMzQzhDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5Q0RPHoRSQdj02Efo2Z7tNmzTlSn9KmWj2 iMyQebFQQFVz3Z0DsJOYSNqB9iVklcqiW7B+TsWtWTXVK+TfJCBSYtByr73XsnQl cADchh49+WB9SEeuD46hBdBhZ6VMTQjVoV1bxsNuUQerwdvx2FBBEo8T4iQ/L49R oeMBsLabmFUfC/9hdfLuUR5hn6mMJ/Gbl/AvcS0uKenxAfoaQwzb9Mdw/zLEBdFK xDWOy1HimUIIkjcASmG4ejtBu5rcEmfpuAYT5UNwmW4CKgnYa+x+pvV1U90Znc7B S4lb8HAUZ9HJUSl2+mNtJeQc0tS1IRM597P6yLl79DLWI+cti2Y= -----END CERTIFICATE-----Generated at Wed May 13 03:23:11 2026 by rpki-client